Just some gossip i got from a government agent today. Anyone thats used the scaps and stigs program knows these things are the best when it comes to hammering down nails in an environment. It automatically creates an action list based on scans it does on local machines and lets you know EXACTLY what needs to be done to get compliant.